CVE-2026-8956

Critical

Published: 19/05/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Risk Assessment

Integer overflow can lead to unexpected application behavior, posing a risk to user data security.

Recommendation

It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate this vulnerability.

Original NVD description (English source)

Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.